Privacy Policy

This Privacy Policy explains how PDF Bean (“we”, “us”) handles personal data when you use the PDF Bean website and PDF tools. We keep what we collect to a minimum, and we never sell your data or use your files to train AI.

Who we are

PDF Bean is the controller of the personal data described here. For any privacy question, email contact@pdfbean.com.

What we collect

• Account data: if you sign in, your email address and whether it is confirmed. We use passwordless email links or Google sign-in, so we never collect a password.
• Subscription data: your plan and its status. Payments are processed by Stripe; we never see or store your full card number.
• Files you upload: files you send for server-side processing, stored privately so you can download your results (see “Your files and retention”).
• Technical data: limited log data such as IP address and browser type, used to run and secure the Service.
• Cookies and analytics: essential cookies to keep your session active (including a temporary anonymous session before you sign in), plus Google Analytics, which sets cookies and measures how the Service is used (for example, pages visited and approximate location). We do not use advertising cookies.

How we use your data

• to provide the tools and process your files;
• to manage your account and subscription and process payments;
• to secure the Service and prevent abuse;
• to understand how the Service is used, through Google Analytics;
• to respond to your support requests;
• to meet legal and accounting obligations.

Legal bases (GDPR)

If you are in the EEA or UK, we rely on: performance of our contract with you (to provide the Service and billing); our legitimate interests (to secure and improve the Service and support you); your consent where required; and compliance with legal obligations. You can withdraw consent at any time.

Your files and retention

When you use a tool, your file is transferred to our servers over an encrypted connection, processed, and stored privately so you can download the result. Downloads use short-lived, signed links. We keep your files so you can find them again under “My documents”; you can delete any file yourself at any time, or ask us to delete it.

We do not open, read, analyze, or share the contents of your files, and we do not use your files to train, improve, or develop any AI models — ours or anyone else’s. Account and billing records are kept for as long as your account is active and as long as the law requires, then deleted.

Cookies

We use strictly necessary cookies to keep you signed in and to keep the Service secure, and Google Analytics to understand how visitors use the Service. Google Analytics sets cookies and collects usage data such as the pages you visit and your approximate location. We do not use advertising cookies. You can opt out of Google Analytics with Google’s opt-out browser add-on or by blocking cookies in your browser.

Sharing and disclosure

We do not sell or rent your personal data. We share it only with the service providers that help us run the Service (such as our authentication, database, and file storage, payment processing, hosting, sign-in, and analytics providers), and when we are legally required to (for example, to comply with a valid legal request) or to protect our rights, users, or the public.

International transfers

We are based in the United States and your data may be processed there and in other countries where our providers operate. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in the EEA or UK (GDPR), you may also complain to your local supervisory authority.

If you are a California resident (CCPA/CPRA), you have the right to know what we collect, to delete it, and to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising — which we do not do — and we will not discriminate against you for exercising these rights. To exercise any right, email contact@pdfbean.com.

Security

We protect your data with encryption in transit and at rest, private storage buckets, and tightly restricted access to account and subscription data. No system is perfectly secure, but we work hard to protect your information and to keep your files accessible only to you.

Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

Changes and contact

We may update this Privacy Policy from time to time. When we do, we will change the “last update” date above and, for material changes, take reasonable steps to notify you. Questions or requests? Email contact@pdfbean.com.